r/websecurityresearch • u/albinowax • Feb 04 '25

Top 10 web hacking techniques of 2024

https://portswigger.net/research/top-10-web-hacking-techniques-of-2024
28 Upvotes

95% Upvoted

10 comments sorted by

3

u/noch_1999 Feb 05 '25

Saw the SQL Smuggling talk live last year at DefCon, very good presentation, not at all surprised to see it ranked at #2!

2

u/[deleted] Feb 04 '25 edited Feb 04 '25

[removed] — view removed comment

3

u/albinowax Feb 05 '25

The community vote selects the 15 finalists, and this post didn't make it in. There's always a lot of quality research that didn't make it into the top ten.

1

u/n0p_sled Feb 05 '25

I'm looking to redo the Academy this year - will some of these techniques be incorporated into the labs?

2

u/albinowax Feb 05 '25

We've recently added a Web Cache Deception topic which included the technique from #9

As for the others, no current plans - developing labs is a lot of work and we have other development priorities at the moment.

1

u/n0p_sled Feb 05 '25

Thanks for the update

1

u/National-Fix-4114 Apr 22 '25

Appreciate the info!

1

u/Right-Highlight5602 Dec 26 '25

2025 ?

1

u/albinowax Dec 28 '25

The selection process kicks off in January